|
Description
|
|
(#Several vulnerabilities has been identified in Joomla's plugins:#- garyscookbook : arbitrary file upload. A remote attacker could exploit by uploading a malicious PHP script file in order to execute arbitrary PHP code.##- smartformer: arbitrary file upload. A remote attacker could exploit by uploading a malicious PHP script file in order to execute arbitrary PHP code.##- osproperty: arbitrary file upload. A remote attacker could exploit by uploading a malicious PHP script file in order to execute arbitrary PHP code.##- simple calendar: SQL injection. A remote attacker could exploit it by using URLs that include specially crafted SQL statements in order to modify or delete entries in some database tables. This vulnerability is due to an improper validation of user-supplied input used in SQL queries in the "id" parameter##- securitycheck: cross-site scripting and SQL injection. A remote attacker can exploit it in order to execute arbitrary JavaScript, HTML or SQL code. These vulnerabilities stem from improper user-input sanitization in the "option" parameter.)
|
